← Vulnerability feed

Vulnerability record · CVE-2019-19792 · published 3 March 2020

CVE-2019-19792: Eset cyber security incorrect default permissions vulnerability

Eset · Cyber Security

A permissions issue in ESET Cyber Security before 6.8.300.0 for macOS allows a local attacker to escalate privileges by appending data to root-owned files.

6.7 CVSS 3.1 Medium EPSS 0.40% · top 68.2% CWE-276 · Incorrect default permissions
6.7CVSS 3.1 base score, v2 7.2
0.40%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
2References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

A permissions issue in ESET Cyber Security before 6.8.300.0 for macOS allows a local attacker to escalate privileges by appending data to root-owned files.

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://danishcyberdefence.dk/blog/esets-cyber-security ExploitTechnical DescriptionThird Party Advisory
https://danishcyberdefence.dk/blog/esets-cyber-security ExploitTechnical DescriptionThird Party Advisory

Track CVE-2019-19792 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2020-10180Eset cyber security interpretation conflict vulnerabilityThe ESET AV parsing engine allows virus-detection bypass via a crafted BZ2 Checksum field in an archive. This affects versions before 1294 of Smart S…EPSS 1.7%7.8CVE-2023-2847Eset cyber security improper privilege management vulnerabilityDuring internal security analysis, a local privilege escalation vulnerability has been identified. On a machine with the affected ESET product instal…EPSS 0.15%7.8CVE-2019-16519Eset cyber security improper privilege management vulnerabilityESET Cyber Security 6.7.900.0 for macOS allows a local attacker to execute unauthorized commands as root by abusing an undocumented feature in schedu…EPSS 0.30%7.5CVE-2020-10193Eset cyber security interpretation conflict vulnerabilityESET Archive Support Module before 1294 allows virus-detection bypass via crafted RAR Compression Information in an archive. This affects versions be…EPSS 1.4%6.5CVE-2019-17549Eset cyber security vulnerabilityESET Cyber Security before 6.8.1.0 is vulnerable to a denial-of-service allowing any user to stop (kill) ESET processes. An attacker can abuse this b…EPSS 1.2%5.5CVE-2021-37850Eset cyber security vulnerabilityESET was made aware of a vulnerability in its consumer and business products for macOS that enables a user logged on to the system to stop the ESET d…EPSS 0.23%5.5CVE-2020-9264Eset cyber security interpretation conflict vulnerabilityESET Archive Support Module before 1296 allows virus-detection bypass via a crafted Compression Information Field in a ZIP archive. This affects vers…EPSS 1.2%7.8CVE-2026-87886Acronis Backup plugins for cPanel, Plesk and DirectAdmin local privilege escalationAcronis Backup plugins for cPanel & WHM, Plesk and DirectAdmin on Linux ship with insecure file permissions (CWE-276), allowing a local user to escal…KEVEPSS 0.23%analysed

Source: NIST National Vulnerability Database (record CVE-2019-19792), CISA KEV, FIRST EPSS (scores of 2026-10-04). This page is refreshed as NVD updates the record.